17Conditions on accreditation

17 Conditions on accreditation

Conditions imposed by the Act (1) The accreditation of an entity as an accredited entity is subject to the condition that the accredited entity must comply with this Act. Conditions imposed by the Digital ID Regulator (2) The Digital ID Regulator: (a) may impose conditions on the accreditation of an entity, either at the time of accreditation or at a later time, if the Digital ID Regulator considers that doing so is appropriate in the circumstances; and (b) must impose conditions on the accreditation of an entity, either at the time of accreditation or at a later time, if directed to do so under subsection 27(1). (3) Conditions may be imposed under paragraph (2)(a) on application by the entity or on the Digital ID Regulator’s own initiative. (4) Without limiting paragraph (2)(a), the Digital ID Regulator may impose conditions relating to the following: (a) any limitations, exclusions or restrictions in relation to the accredited services of the entity; (b) the circumstances or manner in which the accredited services of the entity must be provided; (c) the kinds of restricted attributes of individuals (if any) that the entity is authorised to collect or disclose and the circumstances in which such attributes may be collected or disclosed; (d) the kinds of restricted attributes of individuals (if any) that the entity must not collect; (e) the kinds of biometric information (if any) of an individual the entity is authorised to collect, use or disclose and the circumstances in which such information may be collected, used or disclosed; (f) the entity’s information technology systems through which the entity’s accredited services are provided, including restrictions on changes to such systems; (g) actions that the entity must take before the entity’s accreditation is suspended or revoked. Conditions imposed by the Accreditation Rules (5) The Accreditation Rules may determine that the accreditation of each accredited entity, or each accredited entity included in a specified class, is subject to specified conditions. (6) Without limiting subsection (5), the Accreditation Rules may impose conditions relating to the matters in subsection (4).